Embedded Product Cybersecurity Expert / ISO 21434, IEC 62443 Job at Sopra Steria (Montréal)

Job Description

As a Cybersecurity Engineer – Embedded Products, you will play a central role in ensuring the security and compliance of our customers’ vehicle systems and ECU architectures.

Job Responsibility

Perform a comprehensive risk assessment of the current system architecture and identify item-level functions by applying the TARA process via recognized methods (e.g., ISO/SAE 21434 TARA, STRIDE, or similar)
Build and review item definitions, identify critical assets, potential attack vectors, threat scenarios, and evaluate associated risks at both ECU and vehicle levels
Derive Cybersecurity Goals and Cybersecurity Requirements (hardware, firmware, and system-level design) from the TARA results and ensure traceability throughout the product development lifecycle
Contribute to the Cybersecurity Concept (CSC) and ensure alignment with ISO/SAE 21434 and regulatory requirements
Collaborate with system, software, and hardware engineering teams to integrate recommended security measures (cryptography, secure boot, secure communication, key management, hardware root of trust, debug protections, memory protection, key storage and secure update mechanisms)
Evaluate protocols usage and propose cybersecurity countermeasures such as authentication, encryption, replay protection, secure pairing, and robust key management
Support validation activities for cybersecurity controls and participate in audits, reviews, and documentation of findings
Support compliance and customer requirements aligned with standards and frameworks (as applicable): CRA, ISO/SAE 21434, RED-DA, IEC 62443, NIST, etc

Requirements

Bachelor’s or Master’s degree in Software, Electrical, Computer, or Automotive Engineering or a related field
3–10 years of experience in automotive cybersecurity or embedded systems cybersecurity, with hands-on experience on TARA based on ISO/SAE 21434 processes
Solid foundation in embedded systems architecture, including deep understanding of MCU/SoC design constraints, real-time and Linux-based environments
Proficient with boot architectures and low-level debugging using interfaces such as JTAG, XCP and SWD
Solid understanding of communication protocols (CAN, CAN-FD, Automotive Ethernet, SOME/IP, UDS, UART, SPI, BT, Wi-Fi, USB, NFC, cellular, RF, etc.), and embedded security mechanisms (cryptography, secure boot, secure communication, key management, hardware root of trust, debug protections, memory protection, key storage and secure update mechanisms)
Proven ability to define Cybersecurity Goals and claims, derive Requirements, and ensure traceability through the development lifecycle
Excellent analytical, problem-solving, and documentation skills
Ability to work collaboratively with multi-disciplinary, multi-site engineering teams

Nice to have

Experience with embedded systems, or safety-critical ECUs
Hands-on experience in cybersecurity validation and testing (fuzzing, robustness testing, penetration testing)
Knowledge of Cybersecurity Case preparation and internal/external audit processes
Familiarity with regulatory requirements such as UNECE R155/R156, CRA and standards such as ISO 21434, IEC 62443
Exposure to hardware security modules (TPM, Secure Element, HSM), TrustZone, MPU/MMU
Understanding of Software Bill of Material (SBOM), product security incident response (PSIRT) processes and vulnerability monitoring and management (CVE/CWE/CVSS)

What we offer

Hybrid Work
Industry leading medical, dental, and vision Insurance
Access to a telemedicine service
RRSP program
Personal and sick days
Recreation room with pool table and foosball table

Sopra Steria - All Job Offers

Select Country

Embedded Product Cybersecurity Expert / ISO 21434, IEC 62443

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Embedded Product Cybersecurity Expert / ISO 21434, IEC 62443

IT Training Lead

K Kitchen Representative

K Kitchen Representative

Restaurant Assistant Manager

Plant Operator - Crushing and Screen

Graduate Student Instructors

Shift Supervisor

Shift Supervisor

Our AI answers in your language